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AMENDMENTS TO THE CLAIMS 

Please amend the claims as follows. 

1 . (Currently Amended) A method of controlling access to a computer system, comprising: 

receiving a request to log into the computer system , wherein the request is associated 

with a first log in window : 
determining if a smart card is being used as a part of a login protocol to log in to the 

computer system; 

if the smart card is being used, permitting use of the computer system based on access 
restrictions embedded on the smart card and logging use of the computer for the 
user associated with the smart card; and 

if the smart card is not being used, permitting use of the computer system A [[and]] 
logging use of the computer system to an unknown user , and setting an alert on 
the computer system, wherein the alert is associated with a second log in window , 

2. (Cancelled) 

3. (Currently Amended) The method according to claim I [[2]], wherein the alert comprises 
changing a visual appearance of an icon. 

4. (Currently Amended) The method according to claim I [[2]), further comprising clearing the 
alert if the user associated with the smart card has rights to clear alerts when the smart card is 
being used as a part of the login protocol. 

5. (Original) The method according to claim 1, further comprising determining an access 
restriction associated with a user associated with the smart card and permitting use of the 
computer system subject to the access restriction when the smart card is being used as a part 
of the login protocol. 

6. (Original) The method according to claim 5, further comprising denying access to the 
computer system when the access restriction is not met. 
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7. (Original) The method according to claim 5, wherein the access restriction comprises 
restriction of time of day that use of the computer system is permitted. 

8. (Original) The method according to claim 5, wherein the access restriction comprises 
restriction of computer programs that can be executed on the computer system. 

9. (Original) The method according to claim 1, further comprising: 

setting a timer to measure a time period whenever use of the computer system is 
permitted; 

resetting the timer when the computer system is actively being used; and 
carrying out an automatic logout when the computer system has not been actively used 
during the time period. 

10. (Original) The method according to claim 1, further comprising permitting initialization of a 
smart card if the user associated with the smart card has rights to initialize a smart card, 
when the smart card is being used as a part of the login protocol. 

11. (Original) The method according to claim 10, wherein the initialization further comprises 
establishing access restriction for a user of the smart card. 

12. (Original) The method according to claim 1, wherein the use logging comprises making 
entries into a log file of a user name, time and date of the computer system use. 

13. (Original) The method according to claim 12, wherein the use slogging further comprises 
making entries into the log file of computer programs accessed. 

14. (Original) A computer readable storage medium storing instructions that, when executed on 
a programmed processor, carry out the method according to claim 1. 

15. (Currently Amended) A method of controlling access to a computer system, comprising: 

receiving a request to log into the computer system , wherein the request is associated 

with a first login window : 
determining if a smart card is being used as a part of a login protocol to log in to the 

computer system; 
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if the smart card is being used, permitting use of the computer system based on access . 

restrictions embedded on the smart card and logging use of the computer for the 

user associated with the smart card; and 
if the smart card is not being used, permitting use of the computer system^ [[and]] 

logging use of the computer system to an unknown user , and setting an alert on 

the computer system, wherein the alert is associated with a second log in window ; 
s e tting an al e rt by changing a visual app e aranc e of an icon wh e n us e of th e comput e r 

syst e m is p e rmitt e d and logg e d to an unknown us e r ; 
determining an access restriction associated with a user associated with the smart card 

and permitting use of the computer system subject to the access restriction when 

the smart card is being used as a part of the login protocol; 
denying access to the computer system when the access restriction is not met; 
setting a timer to measure a time period whenever use of the computer system is 

permitted; 

resetting the timer when the computer system is actively being used; and 

carrying out an automatic logout when the computer system has not been actively used 

during the time period; and 
wherein the use logging comprises making entries into a log file of a user name, time and 

date of computer system use. 

16. (Currently Amended) A computer system having an access control system, comprising: 
a central processor; 

a smart card reader accessible by the central processor; 
a security program running on the central proc e ss processor that: 
receives a first request to log into the computer system; 

determines if a smart card is being used as a part of a login protocol to log in to 

the computer system; 
if the smart card is being used, permitting use of the computer system based on 

access restrictions embedded on the smart card and logging use of the 

computer for the user associated with the smart card; and 
if the smart card is not being used, permitting use of the computer system^ [[and]] 

logging use of the computer system to an unknown user , and setting an 
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alert on the computer system, wherein the alert is viewable when 
receiving a second request to log into the computer system . 

17. (Cancelled) 

18. (Currently Amended) The apparatus according to claim J6 [[17]], wherein the alert 
comprises changing a visual appearance of an icon. 

19. (Currently Amended) The apparatus according to claim 16 [[17]], wherein the security 
program further determines an access restriction associated with a user associated with the 
smart card and permits use of the computer system subject to the access restriction when the 
smart card is being used as a part of the login protocol, and denies access to the computer 
system when the access restriction is not met. 

20. (Currently Amended) The apparatus according to claim 16 [[17]], wherein the security 
program also: 

sets a timer to measure a time period whenever use of the computer system is permitted; 
resets the timer when the computer system is actively being used; and 
carries out an automatic logout when the computer system has not been actively used 
during the time period. 

21. (Currently Amended) The apparatus according to claim 16 [[17]], wherein the use logging 
comprises making entries into a log file of a user name, time and date of computer system 
use. 
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